"There are so many ways to use data to hurt people that the only safe database is the one that was never collected.

...

The basic principle is that a system must be designed not to collect certain data, if its basic function can be carried out without that data."

Frills on the system, such as [some feature conceived by PM or developer], are not part of the basic function, so they can't justify incorporating any additional surveillance."

These additional services could be offered separately to users who request them."

The title is "A radical proposal to keep your data safe."

But this doesnt sound "radical" at all.

To recap:

1. Dont collect data when unnecessary for the user.

2. Applications which perform a single function.

3. Additional "features" (i.e. more code) that add more functionality and make applications more complex are fine but they should be optional (e.g. not pre-installed or automatically added via "updates").